$filter Azure审计日志

Question

我正在使用以下API

https://learn.microsoft.com/en - us/graph/api/directoryaudit list?view=graph -休息- 1.0,标签= http

我想只过滤UserManagement类别的资源，但由于某种原因，我正在进行的API调用给了我错误

这就是API调用

GET https://graph.microsoft.com/v1.0/auditLogs/directoryAudits?$filter=category/any(s:s eq 'UserManagement')

{
"error": {
"code": "BadRequest",
"message": "Invalid filter clause",
"innerError": {
"date": "2021-08-10T06:27:37",
"request-id": "cfd471b2-8b13-4a43-b3de-c6a963425f8c",
"client-request-id": "cfd471b2-8b13-4a43-b3de-c6a963425f8c"
}
}
}

Answer 1

显然lambda运算符不起作用，但我仍然可以像这样查询

https://graph.microsoft.com/v1.0/auditLogs/directoryAudits?$filter=category eq 'UserManagement' 

Answer 2

我能够使用startsWith而不是ne过滤数据

https://graph.microsoft.com/v1.0/auditLogs/signIns?$filter=startsWith(userPrincipalName, 'user.com#EXT#@dm4.onmicrosoft.com')